WordPress Two Factor Authentication TFA Plugin Description

The password is the standard security implementation in the computer world. However, passwords can be guessed, hacked, or intercepted. To combat these weaknesses you should install a two-factor authentication solution, which isn’t vulnerable to brute-force attacks

Securing Users Accounts

Unlike passwords, two-factor authentication (2FA) is a two-step process that asks for an additional unique identification such as sending a one time passcode to your mobile phone, sending a one time passcode to your email account or by using an external service such as Google Authenticator

The Secure WordPress Login plugin from CreativeMinds offers a robust solution for two-factor authentication. It lets the WordPress administrator choose a method from the four available to secure the WordPress site login

The WordPress Two-Factor Authentication plugin also lets the WordPress administrator define which user roles require two-factor login. The admin can of course apply our enhanced security check for all users

The WordPress login screen which includes an additional step for email verification

WordPress Two Factor Authentication and Secure Login Premium Features

Supports Google Authenticator – Supports site login using a GA mobile app. Meaning that when a user tries to login they will need to enter a unique code generated in their GA app, Google Authenticator uses Time based One Time Passwords (TOTP) and HMAC based One Time Passwords (HOTP) to Protect your Website

Supports Mobile Phone SMS – Supports site login using the Amazon SMS service (AWS SNS). This means that a text message will be sent to the user with a one time code which they need to enter in order to login

Supports Email verification – Supports site login using an email verification. An email message containing a unique link will be sent to the user. When the user clicks on the link they will be able to login

Supports Email code – Supports site login using a code sent to the user’s email. An email message containing a unique code will be sent to the user. When the user enters the code to the login screen they will be able to login

Customize notifications – All notifications, including SMS and email templates can be easily customized

Control access by role – Define which user roles need enhanced 2FA. Require an extra layer of security for users who are prone to using weak passwords or common passwords

Control access for each specific user profile – Supports security level of user account and reset the security method

Define authentication code duration – Define the duration of each code sent to the user. After expiration user will need to generate a new code

WordPress Two Factor Authentication Frequently asked questions

Does the SMS two factor authentication work in any country?

Yes. You can use it in any country which is covered by Amazon SNS service. You can see the list of countries here

Does the SMS two factor authentication cost money?

Yes. You need to sign up to Amazon SNS and choose your plan. More information about pricing for the SMS notifications can be found here

Does the two factor service cost additional money?

Out of the 4 available options Google Authenticator, Email link verification and email code are free for unlimited use. The only service which costs money is the Amazon SNS. Pricing for the SNS service can be found here

How can the SMS service send a text if I don't have the user's mobile phone number?

Once you activate the SNS service, a new user field is added to the user profile with the user’s mobile phone number. The first time the user logs in, the system sends them an email asking them to enter their mobile phone number. Once they do this, the information is saved in their user profile.

Can I set the 2FA to only work for admin users?

Sure. You can define that only users with admin roles have to use the two factor authentication. All other users will be logged in normally.

Can each user use a different 2FA method?

No, this is not supported. Once the admin sets the preferred 2FA method, all users which are included in the 2FA setting will be using the set method. The admin can change the method which will also require all users to use the new method.

Will it work with WooCommerce Form?

Yes. Since version 1.4.5 we have added support to include the 2FA method in the WooCommerce form.

Still have questions? Send us a message and we will reply within 24 hours.